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Agenda 


Hour 1 
e Part 1: Quick RJMP to AVR + Introduction example 


Hours 2-3: 
* Part 2: Pre-exploitation 
* Part 3: Exploitation and ROP-chains building 
* Part 4: Post-exploitation and tricks 


Hour 4: 
* Mitigations 
e CFP! (Powered by Roman Bazhin) 


If you have a 
question, please 


interrupt and ask 
immediately 


Disclaimer: 
1) Workshop | is VERY fast-paced. 
2) Workshop is highly-practical 
3) You may encounter information 
overflow 


Part 1: What is AVR? 


AVR 


* Alf (Egil Bogen) and Vegard (Wollan)'s RISC processor 
* Modified Harvard architecture 8-bit RISC single-chip microcontroller 
* Developed by Atmel in 1996 (now Dialog/Atmel) 
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Image: https://de.wikipedia.org/wiki/Atmel AVR 


AVR is almost everywhere 


e Industrial PLCs and gateways 

* Home electronics: kettles, irons, weather stations, etc 
e loT 

* HID devices (ex.: Xbox hand controllers) 


* Automotive applications: security, safety, powertrain and 
entertainment systems. 


* Radio applications (and also Xbee and Zwave) 
* Arduino platform 
* Your new shiny loE fridge ;) 


AVR inside industrial gateway 


Synapse loT module with Atmegal28RFA1 inside 


Philips Hue Bulb 


http://www.eetimes.com/document.asp?doc id=1323739&image number=1 


AVR inside home automation dimmer 


Harvard Architecture 


Harvard Architecture 


* Physically separated storage and signal pathways for instructions and 
data 


* Originated from the Harvard Mark I relay-based computer 


Instruction 


Image: https://en.wikipedia.org/wiki/Harvard architecture 


Modified Harvard architecture... 


... allows the contents of the instruction memory to be accessed as if it were data! 


!but not the data as code! 
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Introduction example: 
We're still able to exploit! 


AVR "features" 


AVR-8 


* MCU (MicroController Unit) -- single computer chip designed for 
embedded applications 


e Low-power 

* Integrated RAM and ROM (SRAM + EEPROM + Flash) 
* Some models could work with external SRAM 

* 8-bit, word size is 16 bit (2 bytes) 

* Higher integration 

* Single core/Interrupts 

* Low-freq («20MHz in most cases) 


Higher Integration 


Built-in SRAM, EEPROM an Flash 
GPIO (discrete 1/0 pins) 

UART(s) 

12C, SPI, CAN, ... 

ADC 

PWM or DAC 

Timers 

Watchdog 

Clock generator and divider(s) 
Comparator(s) 

In-circuit programming and debugging support 


AVRs are very different 


* AtTiny13 
* Up to 20 MIPS Througput at 20 MHz 
* 64 SRAM/64 EEPROM/1k Flash 


e Timer, ADC, 2 PWMs, Comparator, 
internal oscillator 


e 0.24mA in active mode, 0.0001mA in 
sleep mode 


AVRs are very different 


* Atmega32U4 

e 2.5k SRAM/1k EEPROM/32k Flash 
* JTAG 

e USB 


e PLL, Timers, PWMs, Comparators, 
ADCs, UARTs, Temperatures sensors, 
SPI, IC, ... => tons of stuff 


AVRs are very different 


e Atmegal28 
e 4k SRAM/4k EEPROM/128k Flash 
e JTAG 


e Tons of stuff:... < NIMEQAL2S 
16AU 001 


A AlmEL 


In the rest of the workshop we will focus on this chip 


Why Atmega128? 


* Old, but very widespread chip. 


e At90can128 — popular analogue for CAN buses in automotive 
application 


* Cheap JTAG programmer 
* Much SRAM == ideal for ROP-chain construction training 


Let's look to the architecture of Atmega128... 
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Ok, ok, let's simplify a bit & 
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Program 
Memory 


Program Status 
Counter and Control 
Instruction General 
Register Purpose 
Registrers 


Instruction 
Decoder 


HO Modules 


Control Lines 


Direct Addressing 
Indirect Addressing 


EEPROM 


Image: http://www.cs.jhu.edu/~jorgev/cs333/usbkey/uC_3.JPG 


Note: code is separated from data 


Memory map 


Figure 9. Data Memory Map 


Memory: registers 


e R1-R25 — GPR 


e X,Y,Z — pair “working” 
registers, e.g. for memory 
addressing operations 


e |/O registers — for accessing 
different "hardware" 


AVR Register File 


X Pointer 
Y Pointer 


Z Pointer 


Memory: special registers 
e PC — program counter, 16-bit register 
* SP — stack pointer, 16-bit register (SPH:SPL) 


* SREG - status register (8-bit) 


Memory addressing 
e SRAM/EEPROM - 16-bit addressing, 8-bit element 


* Flash — 16(8)-bit addressing, 16-bit element 


LPM 


command! 


Memory addressing directions 


* Direct to register 

° Direct to I/O 

* SRAM direct 

* SRAM indirect (pre- and post- increment) 
e Flash direct 


Datasheets are your best friends! 


PAO - PA7 
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DATA DIA. 
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Interrupts 


e Interrupts normal process of code 
execution for handling something 
or reacting to some event 


° Interrupt handler — procedure to 
be executed after interrupt; 
address stored in the interrupt 
vector 


* Examples of interrupts: 
* Timers 
* Hardware events 
* Reset 


Table 23. Reset and Interrupt Vectors 


Program 
Address ^ Interrupt Definition 
External Pin, Power-on Reset, Brown-out Reset 
$0000" | RESET 


Watchdog Reset, and JTAG AVR Reset 
| 2 | so | INTO External Interrupt Request O 
| 3 | sou | INT1 External Interrupt Request 1 
[ « | soos [112 | External interrupt Request 2 
[ s | sexe [mr | External interrupt Request 
| 6 | Soooa |NT4 | External Interrupt Request 4 
| 7 | soooc |wrs | External interrupt Request 5 
| 8 | soooe [int | External Interrupt Request 6 
| 9 | sooo | int? | External interrupt Request 7 
[ 10 | soo | TIMERZCOMP | TimeriCounter2 Compare Match 
31 | sors | rmenzove — | TimerCountera Overtow 
| 12 | $0016 | TIMERICAPT | Timer/Counteri Capture Event 
[13 | soos | TIMER! COMPA | Timer/Counter Compare Match A 
| 14 | soora |TMER!COMPB | Timer/Counteri Compare Match B 
| 15 | SOC | TIMERIOVE | Timer/Countert Overflow 
| 16 | SOME | TIMEROCOMP | Timer/Counter0 Compare Match 
[ v7 | soo | TMEROOVF —|TimerCounter Overtow 
| 18 | Soo22 |SP,STC | SPI Serial Transfer Complete 
[ 19 | s0026 [usamroRx | USARTO Rx Compete 
[20 | 50026 | USARTO, UDAE | USARTO Data Register Empy 
| 21 | soo2s | USARTOTX | USARTO, Tx Complete 
[22 | soa [ac |ADCCOnersion compas 


5a sone FF READY EEPROM Reariv 


AVR assembly 


Instruction types 


* Arithmetic and logic 

* Bit manipulation/test 

* Memory manipulation 

* Unconditional jump/call 
* Branch commands 

e SREG manipulation 

* Special (watchdog, etc) 


Instruction mnemonics 


mov Flo, FU i Copy rO to rlo 


out PORTA (16) > Write r16 to PORTA 


16-bit long 
"Intel syntax" (destination before source) 


A bit more about architecture 


Fuses and Lock Bits 


* Several bytes of permanent storage 


* Set internal hardware and features 
configuration, including oscillator 
(int or ext), bootloader, pin, ability to 
debug/programm, etc. 


e 2 lock bits controls programming 
protection. 


JTAGICE3 (730200010221) - Device Programming 
Tool Device Interface Device ID Target Voltage 
|JTAGICE3 = | ATxmegal28A1 ~ |JTAG v OX E 097 4C Read 33V |Read 
Interface settings Fuse Name lue 
Tool information O ITAGUSERID — 0x00 
@ WDWP 8CLK 
Device information 
M @ wor BCLK 
Memories O ovsoo 
Fuses d : 
@ BOOTR APPLICATION v 
Lock bits po 
@ BODAC DISABLED v 
Production Signatures "cr 
@ BODPD DISABLED = 
Production file @ RSTOISB 
@ sur OMS v 
@ WDLOCK 
© JTAGEN y 
@ EESAVE y 
@ BODLVL 2l 
Fuse Register Value 
FUSEBYTEO — 0x00 
FUSEBYT 0x00 
FUSE x FF 
FUSE xFE 
FUS OxF5 
Copy to clipboard 
4| Auto read 
Y] Verify after programming Program. Verify Read 


= | Read registers...OK 


AVR bootloader — what is it? 


* Part of code that starts BEFORE RESET interrupt. 


* Could be used for self-programmable (i.e. without external device) 
systems, in case you need to supply firmware update for your loT 
device. 


* Bootloader address and behavior configured via FUSEs. 


* BLB lock bits controls bootloader ability to update application and/or 
bootloader parts of flash. 


AVR bootloaders 


* Arduino bootloader 

* USB bootloaders (AVRUSBBoot) 

* Serial programmer bootloaders (STK500-compatible) 
* Cryptobootloaders 


e Tons of them! 


Watchdog 


* Timer that could be used for interrupt or reset device. 


e Cleared with WDR instruction. 
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http://ardiri.com/blog/entries/20141028/watchdog.jpg 


Development for AVR 


Atmel studio 


File Edi View VAssistX Project Build Debug Tools Window Help 


Parm gaudia MES ETELE _ 2 — HANA eR) SBMS a IDA: 
E 
ja 


M32n SOK Gi mal > ur | alaa T|He | D. 25299, 1694] % s È aa ATmega32 T Notoolselected . 
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=#ifndef F CPU 
#define F CPU 16000000UL // 16MHz clock speed M Blinking LED 


sendif 24 Dependencies 
4 Output Files 


#include <avr/io.h> ©) Blinking LED.c 


#include «util/delay.h» 
Sint main(void) 


DORC = @xFF; //Makes PORTC 83 Output 
while(1) //infinite loop 


PORTC = @xFF; //Turns ON All LEDS] 
.delay ms(1000); //1 second delay 
PORTC= 0x00; //Turns OFF All LEDs 
delay ms(1000); //1 second delay 


1203 K 


osp s> Ewa, une Siege rra we roop su € rg 


E: : \ATHEL extensions VAtse1 \AVRGCE\S : 4.1. 95\AVRToolchaia\bin\eve- objduap. exe" -h -S “Blinking LED.elf" > "Blinking LED.155” 
"E:\ATMEL\extensions\Atmel\AVRGCC\3.4,1.95\AVRToolchain\bin\avr-objcopy.exe" -O srec -R .eeprom -R .fuse -R „lock -R „signature “Blinking LED.elf" “Blinking LED.srec" 
"E:\ATMEL\extensions\Atmel\AVRGCC\3.4.1.95\AVRToolchain\bin\avr-size.exe” "Blinking LED.elf" 
text data bss dec hex filename 
200 e e 2ee c8 Blinking LED.elf 
Done executing task "RunCompilerTask". 
Task "RunOutputfFileVerifyTask" 


Budd succeeded 


AV R-GCC 


* Main compiler/debugger kit for the platform 
* Used by Atmel studio 
e Use “AVR libe” -- http://www.nongnu.org/avr-libc/ 


* Several optimization options, several memory models 


Other tools 


e Arduino 
e CodeVision AVR 
e IAR Embedded workbench 


Debugging AVR 


JIAG 


* Joint Test Action Group (JTAG) 
* Special debugging interface added to a chip 


* Allows testing, debugging, firmware manipulation and boundary 
scanning. 


LOAD 


* Requires external hardware 


TCK 


TMS 


SAY Iobse | 


TDI 


AVR JTAGIce3 


JTAG for AVRs 


AVR JTAG mkll 


Y 


AVR JTAG mkl 


Atmel ICE3 
AVR Dragon 


Avarice 


* Open-source interface between AVR JTAG and GDB 

* Also allow to flash/write eeprom, manipulate fuse and lock bits. 
* Could capture the exeuction flow to restore the firmware 

e Example usage: 


avarice --program --file test.elf --part atmegal28 --jtag /dev/ttyUSBO :4444 


AVR-GDB 


* Part of “nongnu” AVR gcc kit. 
* Roughly ported standard gdb to AVR platform 


* Doesn't understand Harvard architecture, i.e. to read flash you will 
need to resolve it by reference of Spc: 


(gdb) x/10b $pc + 100 


Simulators 


e Atmel Studio simulator 
e Proteus simulator 
e Simavr 


e Simulavr 


VM access: 


Login: radare 
Password: radare 


Ex 1.1: Hello world! EXA Mp); 


Real hardware 


cd /home/radare/workshop/ex1.1 
avarice --mkI --jtag /dev/ttyUSB0 -p -e --file build-crumbuinol28/ex1.1.hex -g :4242 


avr-gdb 


Communication: cutecom Or screen /dev/ttyUSBl 9600 


Simulator 


cd /home/radare/workshop/ex1.1 simulator 
simulavr -P atmegal28 -F 16000000 -f build-crumbuino128/ex1.1.elf 


avr-gdb 


Ex 1.2: Blink! XA Mp) 


Real hardware 


cd /home/radare/workshop/ex1.2 
avarice --mkI --jtag /dev/ttyUSBO -p -e --file build-crumbuino128/ex1.2.hex -g :4242 


avr-gdb 


AVR RE 


Reverse engineering AVR binaries 


Pure disassemblers: 
* avr-objdump — gcc kit standard tool 


* Vavrdisasm -- https://github.com/vsergeev/vavrdisasm 


* ODAweb -- https://www.onlinedisassembler.com/odaweb/ 
"Normal" disassemblers: 

* IDA Pro 

e Radare 


IDA PRO: AVR specifics 


e Incorrect AVR elf-handling 

* Incorrect LPM command behavior 
* Addressing issues 

* Sometimes strange output 


* However, usable, but “with care” 


5H e. %, 
| ET ©: A mm AIN I ol 


% A 


® 3.» DO dd? SX PD 


Library function 7 Data B Regular function | Unexplored fM Instruction = Extemal symbol 


[7] Functions ... DO © 


7) Output window 
Search completed 
Python 


o © (©) Hex View-1 @ A Structures QT Enums 
ROM:6SEC 000 E050 ldi 
ROM:6SED 000 EF6F ser 
ROM:6SEE 000 E070 ldi 
ROM:6SEF 000 8908 ldd 
ROM: 65F@ 000 8919 léd 
ROM:65F1 000 892A 1dd 
ROM:6SF2 000 8938 ldd 
ROM:65F3 000 2304 and 
ROM:6SF4 000 2315 and 
ROM:6SFS 000 2326 and 
ROM:65F6 000 2337 and 
ROM:6SF7 000 E088 ldi 
ROM:65F8 000 E090 ldi 
ROM:6SF9 000 938A st 
ROM:65FA 000 940E A2B4 call 
ROM:6SFC 000 2A60 or 
ROM:6SFD 000 2A71 or 
ROM:6SFE 000 2A82 or 
ROM:6SFF 000 2493 or 
ROM:6600 000 E040 ldi 
ROM:6601 000 E050 ldi 
ROM:6602 000 E060 ldi 
ROM:6603 000 EF7F ser 
ROM:6604 000 8908 léd 
ROM:6605 000 8919 ldd 
ROM:6606 000 892A léd 
ROM:6607 000 893B ldd 
ROM:6608 000 2304 and 
ROM:6609 000 2315 and 


© ET Imports 
r21, 0 
r22 
r23, 0 
r16, Y+0x10 
r17, Y+0x11 
r18, Y+0x12 
r19, Y+0x13 
r16, r20 
r17, r21 
r18, r22 
r19, r23 
r24, 8 
r25, 0 
-Y, r24 
sub_A2B4 
r6, r16 
r?, r17 
r8, r18 
r9, r19 
r20, © 
r21, 0 
r22, O 
r23 
r16, 
r17, 
r18, 
r19, 
r16, 
r17, 


MS Or > 
© (jf. Exports 
: Load Immediate 
; Set Register 
: Load Immediate 
; Load Indirect wi 
; Load Indirect wi 
; Load Indirect wi 
; Load Indirect wi 
; Logical AND 
; Logical AND 
- l AND 
: 1 AND 
: Load Immediate 
; Load Immediate 
; Store Indirect 
: Call Subroutine 
; Logical OR 
; Logical OR 
; Logical OR 
; Logical OR 
; Load Immediate 
; Load Immediate 
; Load Immediate 
; Set Register 
; Load Indirect wi 
; Load Indirect wi 
; Load Indirect wi 
; Load Indirect wi 
; Logical ANO 
; Logical AND 
noo 


Radare2 


* Opensource reverse engineering framework (RE, debugger, forensics) 
e Crossplatform (Linux, Mac,Windows,QNX,Android,iOS, ... 
e Scripting = pube AS 


cfef ; set all bits in register 
d8e0 i ; LDI Rd,K. load immediate 
debf ; store register to 1/0 location 
E o cdbf ; store register to I/0 location 
e A lot of Architectures / file-formats m o nv | Lou metu 
ade® i ; LDI Rd,K. load immediate 
b1e0 i ; LDI Rd,K. load immediate 
ece5 i ; LDI Rd,K. load immediate 
Treo i ; LDI Rd,K. load immediate 
(J 02c0 ; relative jump 


... 0590 ; LPM. load programm memory 
0d92 ; ST X,Rr. store indirect 
; JMP XREF from 0x00000080 (fcn.00000000) 


e N ae33 Ox3e ; compare with immediate 

* Without habitual GUI = uno 
d9f7 0x82 ; branch if not equal 
21e0 ldi 0x01 ; LDI Rd,K. load immediate 
aee3 ldi Ox3e ; LDI Rd,K. load immediate 
b1e0 ldi 0x01 ; LDI Rd,K. load immediate 
01c0 0x96 ; relative jump 
1d92 st ; ST X,Rr. store indirect 

; JMP XREF from 0x00000092 (fcn.00000000) 
a63e 0xe6 ; compare with immediate 
b207 ; compare with carry 
e1f7 0x94 ; branch if not equal 
10e0 ldi 0x00 ; LDI Rd,K. load immediate 
cae6 ldi 0x6a ; LDI Rd,K. load immediate 
ded ldi 0x00 ; LDI Rd,K. load immediate 
04c0 Oxac ; relative jump 
2297 sbiw 0x02 ; substract immediate from word 
fe01 movw ; copy register word 
0e94a107 ; 0x00000f42() ; fcn.00000000+3800 ; long call to a subroutine 
; JMP XREF from 0x000000a2 (fcn.00000000) 

c836 0x68 ; compare with immediate 
d107 ; compare with carry 
cof? Oxa4 ; branch if not equal 


Radare2. Tools 


* radare2 * rarun2 
* rabin2 ° rax2 

* radiff2 * r2agent 
* rafind2 * ragg2 

* rasm2 * rahash2 


* r2pm * rasign2 


Radare2. Using 


* Install from git 


H git clone https://github.com/radare/radare2 


H cd radare2 
H sys/install.sh 

e Packages (yara, retdec / radeco decompilers, ...): 
H r2pm -i radare2 


* Console commands 
# r2 -d /bin/Is — debugging 
H r2 —a avr sample.bin — architecture 
H r2 —b 16 sample.bin — specify register size in bits 
H r2 sample.bin -i script — include script 


Radare2. Basic commands 


aaa — analyze 

axt — xrefs 

s — seek 

p — disassemble 

© - grep 

I — run shell commands 
/ — search 

/R- search ROP 

/c— search instruction 
? — help 


1124 
1fbe 
cfef 
d8e0 
debf 
cdbf 
11e0 
ade® 
b1e0 
ece5 

ed 
02c0 
0590 
0d92 


ae33 
b107 
d9f7 
21e0 
aee3 
b1e0 
01c0 
1d92 


a63e 
b207 
e1f7 
10e0 
cae6 
d0e0 
04c0 
2297 
fe01 
0e94a107 


c836 
d107 
cof? 


clr ri 
0x3f, ri 
r28 
r29, 0x08 
Ox3e, r29 
Ox3d, r28 
r17, 0x01 
r26, 0x00 
r27, 0x01 
r30, Ox5c 
r31, 0x0f 
rjmp 0x86 
ro, Z+ 
X+, ro 


cpi r26, Ox3e 
cpc r27, ri? 
brne 0x82 
r18, 0x01 
r26, Ox3e 
r27, 0x01 
rjmp 0x96 
X*, r1 


cpi r26, Oxe6 
cpc r27, r18 
brne 0x94 
r17, 0x00 
r28, 0x6a 
r29, 0x00 
rjmp Oxac 
sbiw r28, 0x02 
movw r30, r28 
call Oxf42 


cpi r28, 0x68 
cpc r29, r17 
brne @xa4 


Radare2. Disassembling 


p? 
pd/pD - dissamble 
pi/pl — print instructions 
Examples: 
» pd 35 (9 function 


[0x0000006a]> p? 
IUsage: p[=68abcdDfiImrstuxz] [argllen] 


p=[bep?] [blks] [len] [blk] 
p2 [len] 

p3 [file] 

p6[de] [len] 

p8[j] [len] 

pa[edD] [arg] 

pA[n ops] 

p[bIBIxb] [len] C[skip]) 
p[bB] [len] 

pc[p] [len] 
p[dD][ajbrfils] [sz] [a] [b] 
pf[?l.nam] [fmt] 
p[ir][df] [len] 

pm [magic] 

pr[glx] [len] 

p[kK] [len] 

ps[pwz] [len] 

pt[dn?] [len] 

pu[w] [len] 

pv[jh] [mode] 

p[xX][owq] [len] 


show entropy/printable chars/chars bars 

8x8 2bpp-tiles 

print stereogram (3D) 

base64 decode/encode 

8bit hexpair list of bytes 

pa:assemble pa[dD]:disasm or pae: esil from hexpairs 
show n_ops address and type 

bindump N bits skipping M 

bitstream of N bytes 

output C (or python) format 

disassemble N opcodes/bytes for Arch/Bits (see pd?) 
print formatted data (pf.name, pf.name $«expr») 

print N ops/bytes (f=func) (see pi? and pdi) 

print libmagic data (see pm? and /m?) 
print N raw bytes (in lines or hexblocks, 
print key in randomart (K is for mosaic) 
print pascal/wide/zero-terminated strings 
print different timestamps 

print N url encoded bytes (w-wide) 

bar |jsonlhistogram blocks (mode: e?search.in) 
hexdump of N bytes (o-octal, w=32bit, q-64bit) 
print zoom view (see pz? for help) 

display current working directory 


g'unzip) 


Radare2. Options 


clear register 


AJ 9x ( 1 : store register to I/O location 
e ~/ radarerc a È CE 
X ) "29, 0x0% ; LDI Rd,K. load ir a 
9x00( 2 2 ; store register /0 location 
à d ib ) ) 8 ; Store register to I/O location 
rm = 9x6 9076 1 ; LDI Rd,K. load immediate 
e as . escri e true )» )7 € ] x0€ ; LDI Rd,K. load immediate 
) : 0) ; LDI Rd,K. load immediate 
LDI Rd,K. load immediate 


— 0x 007e "3 ; ; LDI Rd,K. load immediate 
ad e SCI. utf8=true 9x00000080 x86 ; relative jump 
0 ar 4 ; LPM. load programm memory 
x00( 4 LED, $ ; ST X,Rr. store indirect 
. ; JMP XREF ) 
eeasm midflags=true 0000086 ae: 6, 6: ASIAT TR 
a 00000 r ; compare with y 
0x00( a ; branch if not equal 
[ ( )8C 21 r18 ; LDI Rd,K. load immediate 
— 9x0 e È ; LDI Rd,K. load imme 
. e asm.emu-true 0x6 999€ ç ; LDI Rd,K. load immed 
0x ) ; relative jump 
ST X,Rr. store indirect 
from 0x0000 


i eco sola rized o = uit = | Ls e ; compare with — 


compare with car 


y 
branch if not equal 
LDI Rd,K. load immediate 
B ; LDI Rd,K. load immediate 
9, 0x00 ; LDI Rd,K. load immediate 
Oxac ; relative jump 
2 x02 ; substract immediate from word 
r28 ; copy reg er word 


fcn.00000000() ; long call to a subroutine 
0000032 (fcn.00000000) 
f (68 ; comp with immediate 
aC re with carry 
branch if not equal 


Terminal 


ssembly 


Radare2. Interfaces in S 


Stack 
offset 1 5 8 01247099087 


/ S C | | VV e r14 0x00000080 9906000 
| ra e 90000080 000000 


80000000 


rdi 8x00000006 


* Visual panels — V! (vim like controls) 
* Web-server — r2 -c-H file 
* Bokken 


Disassembly 


TIT 
Hn 

MIN 

MUI 

Overview HH 
Heade HI 
Disassembly Hi 
HI 


Mt 
Hexdump HI 


Debugger 


Functions. HH 
Flags 

Search 

Script 


Comments 


WI 
WI 


WU 
VU 
VI 


Mt N movw 
WU 
HIHI 


AVR JTAG mkl 


Training kit content 


Arduino (not included) 


ESP8266 “WiFi to serial” 
Atmega128 custom 
devboard 


Part 2: Pre-exploitation 


You have a device. First steps? 


Fuzz 
and/or 
static 
analysis 


Decide Determine W Search for Search for Acquire 


the 


what you target TÃO debug 


want platform point(s) point(s) firmware 


Let's start with a REAL example 


* Let's use training kit board as an example. 
* Imagine that you know nothing about it 
* We will go through all steps, one by one 


What we want? 


At first, decide what you want: 

* Abuse functionality 

* Read something from EEPROM/Flash/SRAM 
e Stay persistant 


Determine ta rget platform 
e Look at the board and search for all ICs... 
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Digikey/Octopart/Google... 


Atmega128 16au - O 


& https://octopart.com/search?q=Atmega128%2016au 


Oct#part BOM Manager 
[eral Currency: RUBv Sort by: Relevance | Pricg 


— RoHS compliant 
r "W Atmel 
ATMEGA128-16AU 
ATmega Series 16 MHz 128 KB Flash 4 KB SRAM 8-Bit Microcontroller - TQFP-64, © More Descriptions 


Categories 


» Cables and Wire 
» Connectors and Adapters 


» Current Filtering Distributor sku Stock MOQ Pkg 1 100 1,000 10,000 
> Enclosures * Femel 9171118 346 — 1 “Rus 1030.68 77231 70476 70476 Buy Now 
» Hydraulics 

» Indicators and Displays * Verical ATMEGA128-16A! 5647 3 Rus 63743 63743 63743 Buy Now 
> industrial Control * DigiKey ATMEGA128-16AU-ND 3610 1 Tray «rue 972.60 751.55 61401 61401 Buy Now 
> Machining 

» Optoelectronics * Schukat ATMEGA128-16AU 13666 — 1 "rue 389.99 358.65 358.65 Buy Nom 
» Passive Components * Avnet Express ATMEGA128-16AU 3228 1 crus 91871 69441 660.55 660.55 Buy Now 
> Pneumatics 

> Power Products Show more (24) 

> Raw Materials 


> las A 9 O See Details (Q Specs 4 Realtime data 


> Sound Input/Output 
> Storage and Organization 


> Test Equipment Atmel 7. Datasheet + 
» Tools and Supplies => ATMEGA1280-16AU 
ATmega Series 16 MHz 128 KB Flash 8 KB SRAM 8-Bit Microcontroller - TQFP-100. © More Descriptions 

Manufacturer 

Mmi 8 Distributor SKU Stock MOQ Pkg 1 100 1,000 10,000 

TE Connectivity 3 * Farnell 1455090 110 1 *RUB 1085.00 575.93 57593 575.93 Buy Now 

* Verical ATMEGA1280-16AU 2,148 6 * RUB 599.17 599.17 599.17 Buy Now 

Distributor 


n * Avnet Express ATMEGA1280-16AU 4,548 1 ‚we 867.94 65347 62066 MEE ow 
Newark 6 Talk to Us! 4 
= Marinal a * Diai-Kev ATMEGA1280-16AU-ND 1.479 1 Trav crus 91124 70423 5 ow 


Search for I/O(s) 
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Bus pirate 


Saleae logic analyzer 


Arduino 


Search for debug interface(s) 
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Search for debug interface(s): tools 
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Jtagulator 


Arduino + JTAGEnum 
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JTAGEnum against 
Atmega128 demoboard 


Search for debug & I/O: real device 
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Acquire the firmware 


* From vendor web-site © 
* Sniffing the update process 
* From device 


Acquire the firmware: sniff it! 


o X loply a display fit . 
No. A Time Source Destination Protocol Length Info 
109 34.1006750.. 169.254.21. 169.254.24.. TFTP 558 Data Packet, Block: 21 
110 34.2094460. 169.254.24.. 3169.254.21. TFTP 60 Acknowledgement, Block: 21 
111 34.2095950. 169.254.21.. 169.254.24.. TFTP 558 Data Packet, Block: 22 
Frame 109: 558 bytes on wire (4464 bits), 558 bytes captured (4464 bits) o 
x 2 4b4a2 LL 0x14 
» Ethernet II, Src: DavicomS 42:81:95 (00:60:6e:42:81:95), Dst: AbbStotz 62: 0 0000 6ae ded a ca 0 368 
» Internet Protocol Version 4, Src: 169.254.211.110 (169.254.211.110), Ds 0x000026b2 602a or r6, r16 
» User Datagram Protocol, Src Port: 69 (69), Dst Port: 1024 (1024) 0x000026b4 712a or rf, rif 
Trivial File Transfer Protocol 
0x000026b6 822a or r8, r18 
0000 00 Oc de 62 50 6b 00 60 Ge 42 81 95 08 00 45 00 eos S "T 0x000026b8 932a or r9 r19 
0010 02 20 01 Oc 00 00 80 11 00 00 a9 fe d3 Ge a9 fe e Masan cusses se d 
0020 f7 93 00 45 04 00 02 Oc 21 1d 00 03 00 15 6a on cus j. 0x000026ba 8882 Y, r8 
0030 7b 82 8c 82 9d 82 cc 24 dd 24 8f co ee 24 SEE ETETETT o$ece$_c 0x000026bc 9982 Y41 r9 
` > 


0040 40 eð 5f ef 60 eb 70 ed a 81 1b 81 2c 81 meme s 
0050 04 23 15 23 26 23 37 23 88 el 90 ed Ba JA 0e 94 #.#6#7# ........ 0x000026be 9301 movw r18, r6 


0060 a2 a2 18 01 29 01 4f ef 50 ed 60 rre Fa + 0x000026c0 2501 movw r16, r10 


0070 1b 81 2c 81 3d 810423 15 23 


0080 90 ed Ba 93 Ge 94 a2 a2 38 WS 01 62 28 73 28  ........ + È 0x000026c2 0e946956 call @xacd2 
ed He : : nm 0x000026c6 = 0030 r16, 0x00 
debe ID . 0x000026c8 0107 cpc r16, r17 
mit y 0x000026ca  O9f4 0x26ce 
sora qne iii 0x000026cc = 05c0 rjmp @x26d8 
0100 DC O 0x000026ce e394 r14 

0110 44 24 55 24 Be 81 1f 81 28 85 39 85 02 Əd 13 1d D$US coe. ke 9aonnc 


0120 24 ld 35 1d 40 ed Se ef 60 ed 70 ed 7a 93 6a 93 $.5.0.^. ".p.2.]. 


mon mom. m A ^ mot m ^ m na mm ma 2 mo mm nu = 


Acquire the firmware: JTAG or ISP 


* Use JTAG or ISP programmer to connect to the board debug ports 


* Use: 
* Atmel Studio 
e AVRDude 
* Programmer-specific software to read flash 


5 avrdude -p m128 -c jtagmkI -P /dev/ttyUSBO À 
-U flash:r:"/home/avr/flash.bin":r 


Acquire the firmware: lock bits 


e AVR has lock bits that protects device from extracting flash 


Mode [181 [isa | Protection Type 
[a | a] #7 


Unprogrammed, no protection enabled 


| 2 | o | + | Further Programming disabled, Read back possible 
| 3 | 0 | 0 | Further programming and read back is disabled 


* Removing this lockbits will erase entire device 


* |f you have them set, you're not lucky, try to get firmware from other 
sources 


* However, if you have lock bits set, but JTAG is enabled you could try partial 
restoration of firmware with avarice —capture (rare case) 


Exercise 2.0: Acquire! AMD, 


Real hardware 


e Read fuses and lock bits using avarice -r 


e Acquire firmware using avrdude 


Firmware reversing: formats 


* Raw binary format 
e ELF format for AVRs 
* Intel HEX format (often used by programmers) 


* Could be easily converted between with avr-objcopy, e.g.: 


avr-objcopy -R .eeprom -O ihex test.elf "test.hex" 


Ex 2.1: Hello! RE AMD), 


Real hardware & Simulator 


cd /home/radare/workshop/ex2.1 


avr-objcopy -I ihex -O binary ex2.1.hex ex2.1.bin 
r2 -a avr ex2.l.bin 


Arithmetic instructions 


add 
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and 
GET 
INE 
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Bit manipulation instructions 


lsl EU s 10 << 2 

St EI s Cl 32.2 

KOL 115  QUOLIC Shite. 210 Bits to Che 
Jed E 

EOE 71-6 > vertice. sbatte. LO LES TO che 
EO 

ODE Elos] à Clear Dit. dn els 

sbr ilo, 3 a set Dits U and iL. in 276 


cbi Lo Í ; PORTB[1] = 0 


Memory manipulation 


mov ri, e ; rl = r2 

ldi Oy LU > FU = 10 

lds r2,SFAOO ; r2 = *OxFAOO 
Sts SFAOO, r0 ; *0xFA00 = ro 
st Zip. EU ; *Z(r31:r30) = 
st = TEL > ie = FU 

std ATO, 72 s #245) = EZ 
in EIS. 216 ; 115 = PORTB 


out 516, r0 ; PORTB = r0 


Memory manipulation: stack 


push rl4 ; Save rl4 on the Stack 


SPSS 


pop r15 7 pop COD: Or Stack TO 115 


SP=SP+1 


Memory manipulation: flash 


ipm 216, Z » rlo = *(r3l:r30), but from flash 


Figure 2-9. Program Memory Constant Addressing 


PROGRAM MEMORY 


Note: code is separated from data 


Unconditional jump/call 


jmp 
rjmp 


call 


ret 


SABCI 
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SABCI 


e. 
, 
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P OxABCI 
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"Push "PCI" 
jmp SABC 


"pop PC” 


Harvard architecture? But PC goes to DATA 
memory 


STORE PG ON 


ROP IS POSSIBLE! 


tor.net 


SREG — 8-bit status register 


= Garry 1133 

— Zero flag 

— Negative flag 

two's complement oVerflow indicator 
- NOV, for Signed tests 

= Half carry flag 

= Transfer bit (BLD/BOT) 

- global Interrupt enable/disable flag 


H A IE n < 2 N O 
| 


Conditional jump 


cpse EL». TO y El == 72% 


breg O OA > GC uw PC us La LU 
brne ki ; IZ ? PC = PC + 1 + 10 


SREG manipulations 


e sec/clc — set/clear carry 
* sei/cli — set/clear global interruption flag 
e se*/cl* — set/clear * flag in SRGE 


Special 


* break — debugger break 

* nop — no operation 

* sleep — enter sleep mode 
* wdr — watchdog reset 


Ex 2.2: Blink! RE EX ‘Re 


Real hardware & Simulator 


cd /home/radare/workshop/ex2.1 


avr-objcopy -I xhex -0 binary blink.hex blink.bin 


r2 -a avr ex2.l.bin 


Questions: 


1. Identify main() function and describe it using af 
2. Find the LED switching command 

3. 
4 


. Locate interrupt vector and init code, explain what happens inside init code. 


What type of delay is used and why accurate frequency is required? 


Reversing: function szignatures 


* Most of firmwares contains zero or little strings. 

* How to start? 

* Use function signatures. 

* However, in AVR world signatures may be to vary. 


* Be prepared to predict target compiler/library/RTOS and options... or 
bruteforce it. 


* |n R2, signatures are called zignatures. 


Embedded code priorities 


e Size 

e Speed 

e Hardware limits 
e Redundancy 


* Security 


Fuzzing specifics 


e Fuzzing is Fuzzing. Everywhere. 
* But... we're in embedded world. 
* Sometimes you could detect crash through test/debug UART or pins 


* In most cases, you could detect crash only by noticing, that device is 
no longer response 


* Moreover, watchdog timer will could limit your detection capabilities, 
because it will reset device. 


e So how to detect crash? 


Fuzzing: ways to detect crash 


* JTAG debugger - break on RESET 
e External analysis of functionality — detect execution pauses 


* Detect bootloader/initialization code (e.g. for SRAM) behavior with 
logic analyzer and/or FPGA 


* Detect power consumption change with oscilloscope/DAQ 


Sometimes Arduino is enough to detect 


e |^C and SPI init sequencies could be captured by Arduino GPIOs 


e |f bootloader is slow and waits “1 second, this power consumption 
reduction could be reliably detected with cheap current sensor, e.g.: 


oparkFun Low Current Sensor Breakout - ACS712 
https://www.sparkfun.com/products/8883 


pyy 


Let's proof it. 


Part 3: Exploitation 


Quick intro to ROP-chains 


* Return Oriented Programming 
e Series of function returns 


* We're searching for primitives ("gadgets") ending with 'ret' that could 
be transformed into useful chain 


* SP is our new PC 


Notice: Arduino 
e The next examples/exercises will be based upon Arduio ‘libc’ (in fact, 
Non-GNU AVR libc * Arduino wiring libs) 


* We're using Arduino because it's complex, full of gadgets but free 
(against IAR or CV which are also complex and full of gadgets) 


* Also, Arduino is fairly popular today, due to enormous number of 


libraries and "quick start" (e.g. quick bugs) 


ARDUINO 


Ex 3.1 — 3.3 


Real hardware 


cd /home/radare/workshop/ex3.1 
avarice --mkI --jtag /dev/ttyUSBO -p -e --file build-crumbuinol28/ex3.1.hex -g :4242 


avr-gdb 


Simulator 


cd /home/radare/workshop/ex3.1 simulator 
simulavr -P atmegal28 -F 16000000 -f build-crumbuino128/ex3.1.elf 


avr-gdb 


Or: node exploit.js 


EX4 M p I E 


Example 3.1: Abusing 
functionality: ret to function 


Internal-SRAM only memory map 


external RAM 


0x10FF 
0x1100 
OXFFFF 


o 
o 
= 
e 

=“ 
e 


on-board RAM 


im SP L RAMEND 
*( brkval) (<= "SP - *(__malloc_margin)) 
D *(. malloc heap start) == __heap_start 
. bss end 
. data end ==  bss start 
data start 


Overflowing the heap => Rewriting the stack! 


http://www.atmel.com/webdoc/AVRLibcReferenceManual/malloc 1malloc intro.html 


How to connect data(string/binary) to code? 


Standard model: with .data 
variables 


e Determine data offset in flash 


e Find init code/firmware prologue where 
«data is copied to SRAM 


e Using debugging or brain calculate offset of 
data in SRAM 


e Search code for this address 


Economy model: direct read with 
Ipm/elpm 

e Determine data offset in flash 

e Search code with *lpm addressing to this offset 


ABI, Types and frame layouts (GCC) 


* Types: standard (short == int == 2, long == 4, except for double (4)) 
* |nt could be 8bit if -mint8 option is enforced. 

* Call-used: R18-R27, R30, R31 

* Call-saved: R2-R17, R28, R29 

e R29:R28 used as frame pointer 


* Frame layout after function prologue: 


incoming arguments 


stack slots, Y+1 points at the bottom 


Calling convention: arguments 


* An argument is passed either completely in registers or completely in memory. 


* To find the register where a function argument is passed, initialize the register 
number R, with R26 and follow this procedure: 


1. 
2. 
3. 


6. 


If the argument size is an odd number of bytes, round up the size to the next even number. 
Subtract the rounded size from the register number R,. 


If the new R, is at least R18 and the size of the object is non-zero, then the low-byte of the argument is 
passed in R,. Other bytes will be passed in R,,,, R,» etc. 


If the new register number R, is smaller than R18 or the size of the argument is zero, the argument will 
be passed in memory. 


If the current argument is passed in memory, stop the procedure: All subsequent arguments will also 
be passed in memory. 


If there are arguments left, goto 1. and proceed with the next argument. 


* Varagrs are passed on the stack. 


Calling conventions: returns 


* Return values with a size of 1 byte up to and including a size of 8 
bytes will be returned in registers. 


* For example, an 8-bit value is returned in R24 and an 32-bit value is 
returned R22...R25. 


* Return values whose size is outside that range will be returned in 
memory. 


Example 


For 


Inte. tune: (char say. dong 0); 


* a will be passed in R24. 

* b will be passed in R20, R21, R22 and R23 with the LSB in R20 and the 
MSB in R23. 

* the result is returned in R24 (LSB) and R25 (MSB). 


EX4 M p I E 


Example 3.2: Abusing 
functionality: simple ROP 


ROP gadget sources 


* User functions 

e “Standard” or RTOS functions 
* Data segment O 

* Bootloader section 


More code => more gadgets 


ROP chain size 


e It’s MCU 

e SRAM is small 

* SRAM is divided between register file, heap and stack 

e Stack size is small 

* We're low on chain size 

* Obviously, you will be limited with 20-40 bytes (^15-30 gadgets) 
* However it all depends on compiler and memory model 


http://www.atmel.com/webdoc/AVRLibcReferenceManual/malloc 1malloc tunables.html 


Memory maps — external SRAM/separated stack 


OXFFFF 


on—board RAM 5 E external RAM 


0x0100 


SP _f | | L *( malloc heap end)== heap end 
RAMEND *(_brkval) 


*(_malloc_heap_stan) == heap. start 
t ..bss end 
— data end==  bss stan 
data start 


Memory maps — external SRAM/mixed stack 


external HAM 
z ks g TE 
E on-board RAM = ed ca LL 
Didi a a a 


SP 4 L 'i malloc heap end) == heap end 
RAMEND “| brkval) 
bes end *[ malloc heap star) == heap start 


data end == bes start 


data start 


Detecting "standard" functions 


e In AVR we have bunch of compilers, libraries and even RToSes 
* So, "standard" function could be vary. 


* More bad news: memory model and optimization options could 
change function. 


* The best approach is try to detect functions like malloc/str(n)cpy and 
then find the exact compiler/options that generates such code 


e After it, use function signatures to restore the rest of the code 


* In Radare2, you could use zignatures or Yara. 


EX4 M p I E 


Example 3.3: more complex 
ROP 


Exp n Cy Sr 


Exercise 3.1: ret 2 function 


build exploit that starts with ABC but calls switchgreen() function 


Exp n Cy Sr 


Exercise 3.3: print something 
else 


3.3.1) build exploit that prints “a few seconds..." 
3.3.2 (homework) build exploit that prints “blink a few seconds..." 


Ex 3.4 
Real hardware 


cd /home/radare/workshop/ex3.1 

in Blink.ino change APNAME constant from "esp 123" to "esp your3digitnumber" 

make 

avr-objdump -I ihex -O binary build-crumbuino128/ex3.4.hex ex3.4.bin 

avarice --mkI --jtag /dev/ttyUSBÜ -p -e --file build-crumbuinol28/ex3.4.hex -g :4242 
avr-gdb 

Connect to “esp_your3digitnumber” and type http://192.168.4.1 in your browser 


Simulator 


cd /home/radare/workshop/ex3.4 simulator 
On 1* terminal: node exploit.js 
On 2"6 terminal: tail -f seriall.txt 


In your browser: http://127.0.0.1:5000 


E XA M p I E 


Example 3.4: Blinking 
through HTTP GET 


EXER CISp 


Exercise 3.4: UARTIng 
through HTTP query 


EXER CISp 


Exercise 3.5: Blinking 
througn HTTP Post 


It’s possible to construct ROP with debugger... 
..But if | don't have some, how | could 
determine the overflow point? 


* Reverse and use external analysis to find function that 
overflows 


e Bruteforce it! 


E XA M p I E 


Arduino blink (ROP without 
debugger) 


Part 4: Post-exploitation 
&& Tricks 


What do we want? (again) 


* Evade watchdog 

* Work with persistent memory (EEPROM and Flash) 
* Stay persistent in device 

* Control device for a long time 


Evade the watchdog 


In most cases, there three ways: 
1. Find a ROP with WDR and periodically jump to it. 
2. Find watchdog disable code and try to jump to it. 


3. Construct watchdog disable code over watchdog enable code. 


0fb6 J Ox3f Set r18 to 0 and JMP here 
f894 cli 

a895 wdr 

81bd Ox21, 


Ofbe Ox3f, 
21bd 0x21, 
0895 ret 

0e9459 call 0xb2 


Fun and scary things to do with memory... 


* Read/write EEPROM (and extract cryptography keys) 
* Read parts of flash (e.g., reading locked bootloader section) — could 
be more useful than it seems 


* Staying persistent (writing flash) 


Reading EEPROM/Flash 


* Ok, in most cases it's almost easy to find gadget(s) that reads byte 
from EEPROM or flash and stores it somewhere. 


e We could send it back over UART or any external channel gadgets 


* Not always possible, but there are good chances 


Writing flash 


* Writing flash is locked during normal program execution 


* However, if you use "jump-to-bootloader" trick, you could write flash 
from bootloader sections. 


* To do this, you need bootloader of that has enough gadgets. 


* However, modern bootloaders are big and sometimes you could be 
lucky (e.g. Arduino bootloader) 


* Remember to disable interrupts before jumping to bootloader. 


"Infinite-ROP" trick* 


1. Setarray to some "upper" stack address (A1) and N to some value 
(128/256/etc) and JMP to read(..) 


2. Output ROP-chain from UART to A1. 

3. Set SPH/SPL to A1 (gadgets could be got from init code) 
4. JMP to RET. 

Do Pe? 

6. Profit! 


Don't forget to include 1 and 3-4 gadgets in the ROP-chain that you are 
sending by UART. 


*Possible on firmwares with read(array, N) from UART functions and complex init code 


Mitigations 


Mitigations (software) 


* Safe code/Don't trust external data (read 24 deadly sins of computer 
security) 


* Reduce code size (less code -» less ROP gadgets) 


e Use rjmp/ jmp instead of call/ret (ofc, it won't save you from ret2 
function) 


* Use "inconvenient" memory models with small stack 

* Use stack canaries in your RTOS 

* Limit external libraries 

* Use watchdogs 

* Periodically check stack limits (to avoid stack expansion tricks) 


Mitigations (hardware) 


* Disable JTAG/debuggers/etc, remove pins/wires of JTAG/ISP/UART 
° Write lock bits to 0/0 

* Use multilayered PCBs 

* Use external/hardware watchdogs 

* Use new ICs (more secure against various hardware attacks) 

* Use external safety controls/processors 


And last, but not least: 
* Beware of Dmitry Nedospasov ;) 


Part 4: Post-exploitation 
&& Tricks 


Conclusions 


* RCE on embedded systems isn't so hard as it seems. 
* Abusing of functionality is the main consequence of such attacks 


* However, more scary things like extracting cipherkeys or rewriting the 
flash is possible 


* When developing embedded system remember that security also 
should be part of the Software DLC process. 


Books/links 


Benos A.B. Paspa6orka ycTpolicTB Ha MUKPOKOHTPONNEpax AVR 


Of chen 


Atmega128 disasm thread: http://www.avrfreaks.net/forum/disassembly-atmega128-bin-file — X 


Exploiting buffer overflows on arduino: http://electronics.stackexchange.com/guestions/78880/exploiting- 


stack-buffer-overflows-on-an-arduino 


Code Injection Attacks on Harvard-Architecture Devices: http://arxiv.org/pdf/0901.3482.pdf 


Buffer overflow attack on an Atmega2560: http://www.avrfreaks.net/forum/buffer-overflow-attack- 
atmega2560?page-all 


Jump to bootloader: http://www.avrfreaks.net/forum/jump-bootloader-app-help-needed 


AVR Libc reference manual: 
http://www.atmel.com/webdoc/AVRLibcReferenceManual/overview loverview avr-libc.html 


AVR GCC calling conventions: https://gcc.gnu.org/wiki/avr-gcc 


Travis Goodspeed, Nifty Tricks and Sage Advice for Shellcode on Embedded Systems: 
https://conference.hitb.org/hitbsecconf2013ams/materials/D1T19620-9620Travis?620Goodspeed9620- 


%20Nifty%20Tricks%20and%20Sage%20Advice%20for%20Shellcode%200n%20Embedded%20Systems.pdf 


Pandora's Cash Box: The Ghost Under Your POS: https://recon.cx/2015/slides/recon2015-17-nitay- 


artenstein-shift-reduce-Pandora-s-Cash-Box-The-Ghost-Under-Your-POS.pdf 


Radare2. Links 


* http://radare.org 
* https://github.com/pwntester/cheatsheets/blob/master/radare2. 


md 


* https://www.gitbook.com/book/radare/radare2book/details 
* https://github.com/radare/radare2ida 


Any t) 


U 


Questions £ 


(Odark k3y 
@dukeBarman 
http://radare.org/r/ 


Digital 
Security 


Y) 


http://dsec.ru http://eltech.ru http://zorsecurity.ru 


Now it's CTF time! © 
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